/// <summary> /// Initializes a new instance of the Iok8sapicorev1PodSecurityContext /// class. /// </summary> /// <param name="fsGroup">A special supplemental group that applies to /// all containers in a pod. Some volume types allow the Kubelet to /// change the ownership of that volume to be owned by the pod: /// /// 1. The owning GID will be the FSGroup 2. The setgid bit is set (new /// files created in the volume will be owned by FSGroup) 3. The /// permission bits are OR'd with rw-rw---- /// /// If unset, the Kubelet will not modify the ownership and permissions /// of any volume.</param> /// <param name="runAsGroup">The GID to run the entrypoint of the /// container process. Uses runtime default if unset. May also be set /// in SecurityContext. If set in both SecurityContext and /// PodSecurityContext, the value specified in SecurityContext takes /// precedence for that container.</param> /// <param name="runAsNonRoot">Indicates that the container must run as /// a non-root user. If true, the Kubelet will validate the image at /// runtime to ensure that it does not run as UID 0 (root) and fail to /// start the container if it does. If unset or false, no such /// validation will be performed. May also be set in SecurityContext. /// If set in both SecurityContext and PodSecurityContext, the value /// specified in SecurityContext takes precedence.</param> /// <param name="runAsUser">The UID to run the entrypoint of the /// container process. Defaults to user specified in image metadata if /// unspecified. May also be set in SecurityContext. If set in both /// SecurityContext and PodSecurityContext, the value specified in /// SecurityContext takes precedence for that container.</param> /// <param name="seLinuxOptions">The SELinux context to be applied to /// all containers. If unspecified, the container runtime will allocate /// a random SELinux context for each container. May also be set in /// SecurityContext. If set in both SecurityContext and /// PodSecurityContext, the value specified in SecurityContext takes /// precedence for that container.</param> /// <param name="supplementalGroups">A list of groups applied to the /// first process run in each container, in addition to the container's /// primary GID. If unspecified, no groups will be added to any /// container.</param> public Iok8sapicorev1PodSecurityContext(long?fsGroup = default(long?), long?runAsGroup = default(long?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions), IList <long?> supplementalGroups = default(IList <long?>)) { FsGroup = fsGroup; RunAsGroup = runAsGroup; RunAsNonRoot = runAsNonRoot; RunAsUser = runAsUser; SeLinuxOptions = seLinuxOptions; SupplementalGroups = supplementalGroups; CustomInit(); }
/// <summary> /// Initializes a new instance of the Iok8sapicorev1SecurityContext /// class. /// </summary> /// <param name="allowPrivilegeEscalation">AllowPrivilegeEscalation /// controls whether a process can gain more privileges than its parent /// process. This bool directly controls if the no_new_privs flag will /// be set on the container process. AllowPrivilegeEscalation is true /// always when the container is: 1) run as Privileged 2) has /// CAP_SYS_ADMIN</param> /// <param name="capabilities">The capabilities to add/drop when /// running containers. Defaults to the default set of capabilities /// granted by the container runtime.</param> /// <param name="privileged">Run container in privileged mode. /// Processes in privileged containers are essentially equivalent to /// root on the host. Defaults to false.</param> /// <param name="readOnlyRootFilesystem">Whether this container has a /// read-only root filesystem. Default is false.</param> /// <param name="runAsGroup">The GID to run the entrypoint of the /// container process. Uses runtime default if unset. May also be set /// in PodSecurityContext. If set in both SecurityContext and /// PodSecurityContext, the value specified in SecurityContext takes /// precedence.</param> /// <param name="runAsNonRoot">Indicates that the container must run as /// a non-root user. If true, the Kubelet will validate the image at /// runtime to ensure that it does not run as UID 0 (root) and fail to /// start the container if it does. If unset or false, no such /// validation will be performed. May also be set in /// PodSecurityContext. If set in both SecurityContext and /// PodSecurityContext, the value specified in SecurityContext takes /// precedence.</param> /// <param name="runAsUser">The UID to run the entrypoint of the /// container process. Defaults to user specified in image metadata if /// unspecified. May also be set in PodSecurityContext. If set in both /// SecurityContext and PodSecurityContext, the value specified in /// SecurityContext takes precedence.</param> /// <param name="seLinuxOptions">The SELinux context to be applied to /// the container. If unspecified, the container runtime will allocate /// a random SELinux context for each container. May also be set in /// PodSecurityContext. If set in both SecurityContext and /// PodSecurityContext, the value specified in SecurityContext takes /// precedence.</param> public Iok8sapicorev1SecurityContext(bool?allowPrivilegeEscalation = default(bool?), Iok8sapicorev1Capabilities capabilities = default(Iok8sapicorev1Capabilities), bool?privileged = default(bool?), bool?readOnlyRootFilesystem = default(bool?), long?runAsGroup = default(long?), bool?runAsNonRoot = default(bool?), long?runAsUser = default(long?), Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions)) { AllowPrivilegeEscalation = allowPrivilegeEscalation; Capabilities = capabilities; Privileged = privileged; ReadOnlyRootFilesystem = readOnlyRootFilesystem; RunAsGroup = runAsGroup; RunAsNonRoot = runAsNonRoot; RunAsUser = runAsUser; SeLinuxOptions = seLinuxOptions; CustomInit(); }
/// <summary> /// Initializes a new instance of the /// Iok8sapiextensionsv1beta1SELinuxStrategyOptions class. /// </summary> /// <param name="rule">type is the strategy that will dictate the /// allowable labels that may be set.</param> /// <param name="seLinuxOptions">seLinuxOptions required to run as; /// required for MustRunAs More info: /// https://kubernetes.io/docs/tasks/configure-pod-container/security-context/</param> public Iok8sapiextensionsv1beta1SELinuxStrategyOptions(string rule, Iok8sapicorev1SELinuxOptions seLinuxOptions = default(Iok8sapicorev1SELinuxOptions)) { Rule = rule; SeLinuxOptions = seLinuxOptions; CustomInit(); }